Menu
DONATE NOW
Close

Privacy Policy

1. General Aspects

The following sections explain the Data Processing Policy implemented through the website http://badaputem.ro. By “Activity“, we mean our operations, which may consist of:

  • Carrying out activities of a charitable, mutual aid nature, as well as promoting and supporting social initiatives for help among people, including the development and promotion of public policies that support increasing the quality of life of Romanians in Romania, in the spirit of improving the lives of as many people as possible, and especially of disadvantaged children, adolescents, and youth in Romania;
  • Organizing and conducting analyses, studies, research, and documentation regarding social needs relevant to the Purpose of the Association, including the development and promotion of strategies and public policies, development strategies for Romania, and conducting civic initiatives and mutual aid activities, in the spirit of improving the lives of Romanians in Romania;
  • Providing material support (including money, food, school supplies, scholarships, etc.) for disadvantaged children, adolescents, and youth in Romania, as well as for the elderly and other such persons in need;
  • Running information, support, and counseling programs for various social groups (such as students, parents, educators, people in various public or private positions, etc.);
  • Organizing public information campaigns on topics that correspond to the purpose of the Association;
  • Editing books, magazines, and specific materials (leaflets, brochures, etc.);
  • Contracting market analysis services, studies, research, event organization, public communication through any communication media, consultancy of any kind, and other such relevant services from third parties, for the fulfillment of the purpose and objectives of the Association;
  • Initiating partnership formulas between various groups, professional or civic associations with concerns similar or compatible with the purpose of the Association;
  • Carrying out exchanges of experience with natural or legal persons with similar concerns from the country and abroad;
  • Organizing and running debates and events, meetings, exchanges of views, seminars, conferences, symposiums, roundtables, trainings on topics of interest for the fulfillment of the purpose and objectives of the Association;
  • Participating in congresses, seminars, conferences, etc., in the country and abroad on topics of interest for the fulfillment of the purpose of the Association;
  • Capitalizing on the results obtained within the studies, research, or documentation carried out by entering into partnerships with natural or legal persons, public authorities, institutions, and organizations, from the country and from abroad, including by transmitting the results to the decision-makers of the respective legal entities, institutions, and organizations or public authorities;
  • Carrying out any other types of activities that can be circumscribed to the purpose and objectives of the Association, in compliance with the Romanian legislation in force;
  • Popularizing our manifesto, attracting supporters, gathering the necessary resources through donations, contacting or contracting volunteers, presenting and managing our Activity and actions aimed at Romanian society.

Our activities do not actively aim to attract individuals under the age of 18.

2. Presentation

We, the Association, meaning the Ba Da, Putem! Association (hereinafter the “Association” or “ABDP”), a legal entity under Romanian law, registered in the National Register of Associations and Foundations under number 149/26.10.2021, Fiscal Identification Code (CUI) 45222996, having its registered office in Bucharest, Sector 1, 10 Aleea Alexandru, 1st floor, room no. 8, may process your personal data, as an individual interested in our Activities, in our capacity as a data controller, processor, or joint controller, as applicable, within the meaning of data protection regulations.

Our contact details:

Address: Bucharest, Sector 1, 10 Aleea Alexandru, 1st floor, room no. 8
Telephone: 0212245154
Fax: 0212245153
Email: info@badaputem.ro

The Association respects confidentiality and will process personal data under appropriate technical and organizational security conditions, according to the Data Processing Policy adopted in compliance with Regulation (EU) 2016/679 (“GDPR“).

Through this document, we wish to inform you regarding (i) the nature of the personal data we process for our online and offline Activities, (ii) the purpose of the processing, and (iii) the legal basis for the processing.

3. Data Protection Officer

You can contact the person responsible for data protection at the email address: datepersonale@badaputem.ro.

4. Personal Data

Personal data means any information relating to an identified or identifiable natural person. A person is considered identifiable if the identification can be made directly or indirectly, particularly by reference to an identifier such as a first name, last name, identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity. Information that cannot be associated with your identity (such as the number of page views or other statistical data) does not constitute personal data.

In principle, you can browse our Activities without disclosing personal data. However, using the online contact form or subscribing to the newsletter implies the disclosure of personal data.

Generally, we collect personal data directly from the data subjects. If your personal data was provided to us by a third party or reached us by error, you have all legal remedies available for the purpose of deleting the data.

5. Storage of Personal Data

Your data is stored by our own means on specially protected servers. The data is protected by the technical and organizational measures we have taken to prevent unauthorized loss, destruction, access, modification, and dissemination. Access to your data is permitted only to a limited number of authorized persons. Authorized persons are responsible for the technical, commercial, or operational management of the servers and the Activity.

Your data transmitted via the internet is encrypted. We use an SSL (Secure Socket Layer) certificate for data transmission.

6. Legal Basis for Processing

If we obtain your consent for the processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis for our processing.

If we process personal data because it is necessary for the performance of a contract or within a quasi-contractual framework (e.g., to respond to a request according to your needs), then Article 6(1)(b) of the GDPR serves as our legal basis for processing the data.

If we process personal data to fulfill a legal obligation binding upon us, then Article 6(1)(c) of the GDPR serves as the legal basis for such processing.

Article 6(1)(f) may serve as a legal basis if the processing of personal data is necessary to serve a legitimate interest of the Association or a third party, provided that your fundamental interests, rights, and freedoms are not overridden.

Through this Data Processing Policy, we will present specifically what our legal basis is for each category of personal data processed.

7. Erasure of Personal Data

Generally, we delete personal data if it has been processed for a single purpose that has been achieved. However, certain personal data may be subject to storage obligations for limited periods of time under applicable legal provisions. The Association deletes the data upon the expiration of the legal retention terms or, as applicable, securely blocks access to the personal data until those periods of time have elapsed.

8. Data Processing in the Context of Popularizing the Activity

Upon each access to our Activities, we may collect the following data regarding the device used for access: the device used, IP address, the web browser used, and the date and time of access. We collect information regarding the Activity viewed, web browser version, operating system, and internet service provider. We also track the websites from which you were redirected to the respective Activity.

We carry out such processing in support of our legitimate interest, to enable us to display the respective accessed pages in a manner compatible with the device you are using for access. Among other things, we process this data for the purpose of fixing certain errors, quantifying the interest generated by certain Activities, and proceeding with the adaptation or improvement of the Activities. This purpose is justified by our legitimate interest, legally based on Article 6(1)(f) of the GDPR.

The IP address is only kept for the duration of the session and is deleted or encrypted when the session is closed. All data processed for this purpose is kept for limited durations of time up to 13 months.

9. Use of Cookies

We reserve the right to use cookies managed by third parties to personalize content and advertisements, to provide social media features, and to analyze traffic. These third parties may combine this information with other details provided by you or collected from your use of their services. If you choose to continue using our website, you agree to the use of our cookies.

We invite you to consult our cookie policy to express your preferences.

10. Data Processing for Job/Volunteer Applications

You have the opportunity to apply for one of the open positions for employment or volunteer recruitment within the Association by using the email addresses indicated on the website. Upon receipt of an application, your documents are sent via electronic communication means. If your professional profile, as shown in the submitted documents, does not correspond to any open position within our organization, you will be informed, and the submitted documents will be deleted from our records within 6 months from the date of receipt.

In any case, within the time interval designated for documentation storage, you have the opportunity to exercise any of the rights we guarantee to data subjects under the law, as detailed in this Policy.

In the context of submitting an application, the legal basis for processing is based on your initiative to enter into a contractual relationship with us and is regulated by Article 6(1)(b) of the GDPR.

11. Communication

You can contact us directly using the address indicated on the website.

You can reach us using any of the contact means listed in the introductory part of this Policy or through any data presented on the website—namely by telephone, fax, email, mail, or express courier. In this context, we will process exclusively the personal data related to the communication channel you choose, respectively: the telephone number, mailing address, or email address associated with your name.

We will use the personal data collected in this manner exclusively for the purpose of responding to your request or remedying the matter brought to our attention through any of these means.

An exception to the processing duration mentioned above applies if such requests create legal obligations for us. In such situations, the personal data relevant to resolving the request will be kept in compliance with the applicable legal terms, but for no more than 3 (three) years from the date the request or complaint was resolved.

The legal basis for processing personal data within communications with us is Article 6(1)(b) of the GDPR.

The Association collects personal data: first name, last name, email address, telephone number, and opinions, directly from data subjects through the contact form. The Association processes the data from the date of collection exclusively for this purpose. If the data subject is not the person who filled out the data, or if it is the person who provided the data but changed their mind regarding the request, the Association deletes the data collected in this way as soon as the data subject has expressed their option not to be contacted anymore, by accessing the link available in the data collection confirmation message.

The data collected in this manner is processed in association with the personal data controller that manages the Association’s Facebook and Instagram pages. Details regarding the data processing policy applicable to these operations can be found in the “Links to Other Websites” section below.

The same technical and organizational security measures detailed herein apply to the personal data the Association processes for this purpose. Data subjects benefit from all rights provided by law and explained herein regarding the data collected by the Association in this manner.

The Association does not request the transmission of any personal data other than the name, email address, and/or telephone number for the purpose of responding to a request received from the data subject.

12. Collection of Donations

The Association’s activities are financed through donations in cash or in kind, or sponsorships under the conditions of Law no. 32/1994 on sponsorship, amended and updated (“Sponsorship Law”) and in accordance with applicable tax provisions. In this context, the Association processes the personal data of donors depending on the type of donation (cash or in-kind contribution) as follows:

  1. Donations consisting of the transfer of sums of money to ABDP via direct bank transfer into ABDP’s account, as these details are made available through the Site. To the extent that such a mechanism becomes available within the Site, the donation may be made through payment intermediary platforms such as, but not limited to, Stripe, Inc.
  2. Donations made by redirecting legally established quotas from income tax, in accordance with applicable tax provisions.
  3. Sponsorships based on a sponsorship contract regulated by the Sponsorship Law or based on the redirection of a quota from corporate income tax / micro-enterprise income tax, according to applicable tax provisions.
13. Unsolicited Documents and Information

The Association may receive documents or information that it did not expressly or tacitly request from data subjects, for various purposes that are not part of our activity or are adjacent to it. We reserve the right not to act upon requests that exceed the activities we promote, carry out, or support.

If we choose not to act upon such a request, or if a potential effort on our part would be manifestly unfounded, the personal data that comes into our possession at the initiative of the data subject without being requested by us will be deleted from all storage media, and a notification regarding the decision not to proceed with the request and the deletion of the respective data will be sent to the data subject.

However, the Association may process personal data or even special categories of personal data at the request and initiative of the data subject, in direct connection with our Activities, to fulfill an objective of the data subject. For this purpose, the Association will ensure technical and organizational measures appropriate to the level of security required by the categories of data processed.

Personal data or special categories of personal data will be kept in our records for different durations of time, as applicable:

  1. for the period of time necessary to resolve the request received from the data subject, or
  2. for the period of time necessary to complete the steps implied by the data subject’s objectives disclosed to us on the date the respective personal data is entrusted to us, and may be safely transmitted to third parties—contractors of the Association—who may be in a position to resolve the request received from the data subject, or to recipients who are authorities of the Romanian state.

In any case, the storage duration of the respective data, regardless of the storage medium, will not exceed the term provided by law, calculated from the date the data was entrusted to us.

Personal data that we did not request, but which the Association decides to use to satisfy an interest of the data subject, will be, depending on the storage medium, deleted from our records or destroyed as follows:

  1. immediately upon receipt, if the request received from the data subject, in connection with which the respective personal data was disclosed, is manifestly unfounded;
  2. as soon as the data subject’s request has been resolved;
  3. within a maximum of three (3) months if the steps initiated at the request of the data subject could not achieve their purpose and if the retention of data for a longer term is not provided for by the law applicable to the Association.
14. Links to Other Websites

On our website, you will find links to the social networks Facebook and Instagram. Accessing these links takes you outside our website. Our data processing policy does not apply to these websites. You can find details regarding the data processing policy for each of these links at the following addresses:

Facebook: http://www.facebook.com/policy.php
Instagram: https://help.instagram.com/402411646841720
Threads: https://terms.threads.com/privacy-policy
X (formerly known as Twitter): https://gdpr.twitter.com/
LinkedIn: https://privacy.linkedin.com/gdpr?lr=1
YouTube: https://policies.google.com/privacy?hl=en-US#europeanrequirements

15. Rights Regarding Personal Data

Under the GDPR, data subjects have several rights. If you wish to exercise any of these rights or obtain additional information regarding the processing of personal data, please contact us. The main rights of data subjects are the following:

  1. The right to be informed means that you are informed regarding the purpose, means, and duration of the processing carried out by us on your personal data. Through this Policy, we consider that we have informed data subjects regarding the processing operations carried out. If you do not consider yourself fully informed by the publication of this policy and the information provided, we invite you to exercise one of the rights below;
  2. The right of access means that you have the right to obtain access to the personal data processed by us and regarding the purpose, means, and duration of the processing. To exercise this right, we recommend that you fill out the request available here;
  3. The right to rectification allows you to intervene, under the conditions of Article 16 of the GDPR, whenever your personal data processed by us is incorrect or incomplete. To exercise this right, we recommend that you fill out the request available here;
  4. The right to restrict processing allows you, under the conditions provided by Article 18 of the GDPR, to request that we restrict the processing of certain personal data concerning you. To exercise this right, we recommend that you fill out the request available here;
  5. The right to object to processing gives you the opportunity to object to processing whenever the processing of your personal data by us is based solely on your consent as the legal basis. To exercise this right, we recommend that you fill out the request available here;
  6. The right to data portability can be exercised only in relation to personal data processed by automated means and allows you to receive the data processed by us in a structured, commonly used, and machine-readable format. To exercise this right, we recommend that you fill out the request available here;
  7. The right to erasure (right to be forgotten) can be exercised within the limits described by Article 17 of the GDPR and allows you to request, under certain conditions, that we delete personal data concerning you. To exercise this right, we recommend that you fill out the request available here.
16. Additional Information

We are obliged to respond to any of your requests regarding the exercise of a right within 30 days from the date of receipt of the complete request. If you have not received a response from us within this term, you have the right to address the National Supervisory Authority for Personal Data Processing (ANSPDCP):

Website: www.dataprotection.ro
Address: 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, postal code 010336, Bucharest, Romania
Email: anspdcp[at]dataprotection.ro
Fax: +40318.059.602

We reserve the right to modify our data protection practices and to update and modify the Data Processing Policy at any time when we deem it appropriate or when required by law. This Data Processing Policy is updated as of the date appearing at the top of the document, and previous versions are accessible at an address that will be provided within the updated version of this document, in the corresponding paragraph, to the extent that it will be applicable and updates to this version exist.